Ops Set
Use these docs together:| Concern | Canonical doc |
|---|---|
| Local dev | local-development.md |
| Deployment modes | deployment-modes.md |
| Docker and compose | docker.md |
| Environment variables | environment-variables.md |
| Secrets | secrets.md |
| Database | database.md |
| Storage | storage.md |
| Runtime services | runtime-services.md |
| Hosted ingress | obs-hosted-ingress.md |
| Recovery | ../RECOVERY.md |
Operator Defaults
- Use
pnpm devfor the fastest local loop. - Use
local_trustedwhen you want zero-login local access on loopback. - Use
authenticated + privatefor Tailscale, VPN, or LAN access. - Use
authenticated + publiconly when the host is intentionally internet-facing. - Use
./scripts/intelligence-stack.shfor the additive hosted-monitor stack. - Treat
obs-proxyas the single browser-facing ingress point for the hosted monitor. - Keep board/auth secrets separate from provider-connected-account auth and from application secrets.
First Commands
Recovery Entry Points
- Local dev broken: start with docs/RECOVERY.md
- Hosted ingress broken: start with obs-hosted-ingress.md
- Docker startup broken: start with docker.md